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REMARKS 

Claims 24, 26-31, 33-44 and 46-54 were examined and reported in the Office Action. 
Claims 29-31, 33-44 and 46-54 are rejected. Claims 24 and 26-28 are allowed. Claim 29 is 
canceled. Claims 30 and 43 are amended. Claims 24, 26-28, 30-31, 33-44 and 46-54 remain. 

Applicant requests reconsideration of the application in view of the following remarks. 

I. Claim Objections 

Claim 300 is objected to for informalities. AppUcant has amended claim 30 to overcome 
the informal objection. 

Accordingly, withdrawal of the informal objection for claim 30 is respectfully requested. 

II. 35 U.S.C. $112 

It is asserted in the Office Action that claims 29 and 43-54 are rejected under 35 U.S.C. 
§112, first paragraph, as failing to comply with the written description requirement. Applicant 
has canceled claim 29. Applicant has amended claim 43 to overcome the 35 U.S.C. §112, first 
paragraph rejection. 

Accordingly, withdrawal of the 35 U.S.C. §1 12, first paragraph rejection for claims 29 
and 43-54 are respectfully requested. 

III. 35 U.S.C. $ 103(a) 

A. It is asserted in the Office Action that claims 30, 33-38, 40, 43, 46-50, and 52 are rejected 
in the Office Action under 35 U.S.C. § 103(a) as being obvious over U. S. Patent No. 6,141,760 
issued to Abadi et al ("Abadi") in view of U.S. Patent No. 6,826,686 issued to Peyravian et al. 
("Peyravian ") further in view of Schneier ("Schneier"), ''Applied Cryptography, " 1996, pp. 165- 
166 and 429-43 1. Applicant respectfully traverses the aforementioned rejection for the 
following reasons. 
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According to MPEP §2142 

[t]o establish a prima facie case of obviousness, three basic criteria 
must be met. First, there must be some suggestion or motivation, 
either in the references themselves or in the knowledge generally 
available to one of ordinary skill in the art, to modify the reference 
or to combine reference teachings. Second, there must be a 
reasonable expectation of success. Finally, the prior art reference 
(or references when combined) must teach or suggest all the claim 
limitations. The teaching or suggestion to make the claimed 
combination and the reasonable expectation of success must both 
be found in the prior art, and not based on applicant's disclosure." 
f in re Vaeck . 947 F.2d 488, 20 USPQ2d 1438 (Fed. Cir. 1991)). 

Further, according to MPEP §2143.03, "[t]o estabhsh prima facie obviousness of a 
claimed invention, all the claim limitations must be taught or suggested by the prior art. ( Li re 
Rovka . 490 F.2d 981, 180 USPQ 580 (CCPA 1974)." ''All words in a claim must be considered 
in judging the patentability of that claim against the prior art." ( In re Wilson , 424 F.2d 1382, 
1385, 165 USPQ 494, 496 (CCPA 1970), emphasis added.) 

Applicant's amended claim 30 contains the limitations of 

receiving a plurality of names for independent software 
applications that require a password for a user to use anv of the 
software applications: generating a plurality of random salt values 
for each software application: generating a hash from one random 
salt value and input data, the one salt value only associated with 
one specific software apphcation , the input data including a user 
identification and a strong password; generating a software 
application dependent password from the hash; and returning the 
software application dependent password to a user to gain entry to 
the software application, wherein a user does not need to one of 
remember the software application dependent password and record 
the software application dependent password as the software 
application dependent password is one of computed each time a 
user requests access to the specific software application and 
temporarily stored a first time the user requests access to the 
specific software application for a predetermined time period. 
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Applicant's amended claim 43 contains the limitations of 

receive a plurality of names for independent software applications 
that require a password for a user to use any of the software 
applications: generate a plurality of random sah values for the 
software applications: generate a hash for each of the plurality of 
random salt values and input data, each salt value only associated 
with one specific software application, the input data including a 
user identification and a strong password; generate a software 
application dependent password for one hash for a user selected 
software application : and return the software application dependent 
password to a user for the selected software application to gain 
entry to the selected software application , wherein the user does 
not need to one of remember the software application dependent 
password for the selected software application and record the 
software application dependent password for the selected software 
application as the software application dependent password is 
generated each time a user requests access to the selected software 
appUcation. 

Abadi discloses generating passwords for password controlled access points. Abadi uses 
a master password, a service name and a usemame. The master password, service name and user 
name are combined using an irreversible fimction, e.g., a hash fixnction, to generate a unique 
password. Abadi, however, does not teach, disclose or suggest 

receiving a plurality of names for independent software 
applications that require a password for a user to use any of the 
software applications: generating a plurality of random salt values 
for each software application: generating a hash fi-om one random 
salt value and input data, the one salt value only associated with 
one specific software application. 



receive a plurality of names for independent software 
applications that require a password for a user to use any of the 
software applications: generate a plurality of random salt values for 
the software applications: generate a hash for each of the plurality 
of random salt values and input data, each salt value only 
associated with one specific software application , the input data 
including a user identification and a strong password; generate a 
software application dependent password for one hash for a user 
selected software application : and retum the software application 
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dependent password to a user for the selected software application 
to gain entry to the selected software application , 

Peyravian discloses a secure method of changing a password when the password is being 
transmitted over untrusted networks. Peyravian uses a collision-resistant hash function. 
Peyravian, however, does not teach, disclose or suggest 

receiving a plurality of names for independent software 
applications that require a password for a user to use any of the 
software applications: generating a plurality of random salt values 
for each software application: generating a hash fi-om one random 
salt value and input data, the one salt value only associated with 
one specific software application, 

or 

receive a plurahty of names for independent software applications 
that require a password for a user to use any of the software 
applications: generate a plurality of random salt values for the 
software applications: generate a hash for each of the plurality of 
random salt values and input data, each salt value only associated 
with one specific software application , the input data including a 
user identification and a strong password; generate a software 
application dependent password for one hash for a user selected 
software application : and return the software application dependent 
password to a user for the selected software application to gain 
entry to the selected software application . 

Schneier discloses symmetric key length, one-way hash fimctions, et al. Schneier, 
however, does not teach, disclose or suggest 

receiving a plurality of names for independent software 
applications that require a password for a user to use any of the 
software applications: generating a plurality of random salt values 
for each software application: generating a hash from one random 
salt value and input data, the one salt value only associated with 
one specific software application, 

or 

receive a plurality of names for independent software applications 
that require a password for a user to use any of the software 
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applications: generate a plurality of random salt values for the 
software applications: generate a hash for each of the plurality of 
random salt values and input data, each salt value only associated 
with one specific software application , the input data including a 
user identification and a strong password; generate a software 
application dependent password for one hash for a user selected 
software application : and return the software application dependent 
password to a user for the selected software application to gain 
entry to the selected software application . 

Therefore, even if Abadi, Peyravian and Schneier were combined, the resulting invention 
would still not teach all of Applicant's amended claims 30 and 43 hmitations. Since neither 
Abadi, Peyravian, Schneier, and therefore, nor the combination of the three, teach, disclose or 
suggest all the limitations of Applicant's amended claims 30 and 43, Applicant's amended claims 
30 and 43 are not obvious over Abadi in view of Peyravian and fiirther in view of Schneier since 
a prima facie case of obviousness has not been met under MPEP §2142. Additionally, the claims 
that directly or indirectly depend fi-om amended claims 30 and 43, namely claims 33-38 and 40, 
and 46-50 and 52, respectively, would also not be obvious over Abadi in view of Peyravian and 
fiirther in view of Schneier for the same reason. 

Accordingly, withdrawal of the 35 U.S.C. § 103(a) rejection for claims 30, 33-38, 40, 43, 
46-50, and 52 is respectfiilly requested. 

B. It is asserted in the Office Action that claims 31 and 44 are rejected in the Office Action 
under 35 U.S.C. § 103(a) as being obvious over Abadi, in view of Peyravian, in view of 
Schneier, and fiirther in view of U. S. Patent No. 6, 006,333 to Nielsen ("Nielsen"). Applicant 
respectfiilly traverses the aforementioned rejection for the following reasons. 

Applicant's claim 31 directly depends on amended claim 30. AppHcant's claim 44 
directly depends on amended claim 43. As discussed above in section ni(A), neither Abadi, 
Peyravian, Schneier, and therefore, nor the combination of the three teach, disclose or suggest 
AppUcant's claim3 30 and 43 limitations. 

Nielson discloses a system for maintaining passwords for different applications. Nielson, 
however, does not teach, disclose or suggest Applicant's claim 30 and 43 limitations of 
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receiving a plurality of names for independent software 
applications that require a password for a user to use any of the 
software applications: generating a plurality of random salt values 
for each software application; generating a hash from one random 
salt value and input data, the one salt value only associated with 
one specific software application, 

or 

receive a plurality of names for independent software applications 
that require a password for a user to use any of the software 
applications: generate a plurality of random salt values for the 
software applications: generate a hash for each of the plurality of 
random salt values and input data, each salt value only associated 
with one specific software application , the input data including a 
user identification and a strong password; generate a software 
application dependent password for one hash for a user selected 
software application : and return the software application dependent 
password to a user for the selected software application to gain 
entry to the selected software application . 

Neither Abadi, Peyravian, Schneier, Nielson, and therefore, nor the combination of the 
four, teach, disclose or suggest the limitations contained in Applicant's amended claims 30 and 
43, as listed above. Since neither Abadi, Peyravian, Schneier, Nielson, and therefore, nor the 
combination of the four, teach, disclose or suggest all the limitations of Applicant's amended 
claim 30 and 43, Applicant's amended claims 30 and 43 are not obvious over Abadi in view of 
Peyravian, Schneier and Nielson since a prima facie case of obviousness has not been met under 
MPEP §2142, Additionally, the claims that directly depend from amended claims 30 and 43, 
namely claims 31, and 44, respectively, would also not be obvious over Abadi in view of 
Peyravian, Schneier and Nielson for the same reason. 

Accordingly, withdrawal of the 35 U.S.C. § 103(a) rejection for claims 31 and 44 is 
respectfully requested. 

C. It is asserted in the Office Action that claims 39 and 51 are rejected in the Office Action 
under 35 U.S.C. § 103(a) as being obvious over Abadi in view of Peyravian, Schneier, and 
fixrther in view of U. S. Patent No. 6,064,736 issued to Davis et al ("Davis"). Apphcant 
respectfixUy traverses the aforementioned rejection for the following reasons. 
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Applicant's claim 39 directly depends on amended claim 30. Applicant's claim 51 
directly depends on amended claim 43. As discussed above in section III(A), neither Abadi, 
Peyravian, Schneier, and therefore, nor the combination of the three teach, disclose or suggest 
Apphcant's claims 30 and 43 limitations. 

Davis discloses using a MD5 algorithm. Davis, however, does not teach, disclose or 
suggest Applicant's claim 30 and 43 limitations of 

receiving a pluralitv of names for independent software 
applications that require a password for a user to use any of the 
software applications; generating a plurality of random salt values 
for each software application; generating a hash from one random 
salt value and input data, the one salt value only associated with 
one specific software application. 



receive a plurality of names for independent software applications 
that require a password for a user to use any of the software 
applications; generate a plurality of random salt values for the 
software applications; generate a hash for each of the plurality of 
random salt values and input data, each salt value only associated 
with one specific software application , the input data including a 
user identification and a strong password; generate a software 
application dependent password for one hash for a user selected 
software application ; and retum the software application dependent 
password to a user for the selected software application to gain 
entry to the selected software application . 

Neither Abadi, Peyravian, Schneier, Davis, and therefore, nor the combination of the 
four, teach, disclose or suggest the limitations contained in Applicant's amended claims 30 and 
43, as listed above. Since neither Abadi, Peyravian, Schneier, Davis, and therefore, nor the 
combination of the four, teach, disclose or suggest all the limitations of Applicant's amended 
claim 30 and 43, Applicant's amended claims 30 and 43 are not obvious over Abadi in view of 
Peyravian, Schneier and Davis since a prima facie case of obviousness has not been met under 
MPEP §2142. Additionally, the claims that directly depend from amended claims 30 and 43, 
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namely claims 39, and 51, respectively, would also not be obvious over Abadi in view of 
Peyravian, Schneier and Davis for the same reason. 

Accordingly, withdrawal of the 35 U.S.C. § 103(a) rejection for claims 39 and 51 is 
respectfully requested. 

D. It is asserted in the Office Action that claims 41 , 42, 53, and 54 are rejected in the Office 
Action under 35 U.S.C. § 103(a) as being unpatentable over Abadi in view of Peyravian and 
Schneier, and further in view of U.S. Patent AppHcation No. 6,601,175 issued to Arnold et al. 
("Arnold"). Applicant respectfully traverses the aforementioned rejection for the following 
reasons. 

Applicant's claims 41 and 42 indirectly depend on amended claim 30. Applicant's 
claims 53 and 54 indirectly depend on amended claim 43. As discussed above in section III(A), 
neither Abadi, Peyravian, Schneier, and therefore, nor the combination of the three teach, 
disclose or suggest Applicant's claims 30 and 43 hmitations of 

receiving a plurality of names for independent software 
applications that require a password for a user to use any of the 
software applications; generating a plurality of random salt values 
for each software application: generating a hash from one random 
salt value and input data, the one salt value only associated with 
one specific software appHcation, 

or 

receive a plurality of names for independent software applications 
that require a password for a user to use any of the software 
applications; generate a plurality of random salt values for the 
software applications; generate a hash for each of the plurality of 
random salt values and input data, each salt value only associated 
with one specific software application , the input data including a 
user identification and a strong password; generate a software 
application dependent password for one hash for a user selected 
software application ; and retum the software application dependent 
password to a user for the selected software application to gain 
entry to the selected software application . 
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Arnold discloses password protection for data processing systems through the use of 
limited-use machine-specific passwords. Amold, however, does not teach, disclose or suggest 
AppHcant's claim 30 and 43 limitations of 

receiving a plurality of names for independent software 
applications that require a password for a user to use any of the 
software applications: generating a plurality of random salt values 
for each software application: generating a hash from one random 
salt value and input data, the one salt value only associated with 
one specific software application, 

or 

receive a plurality of names for independent software applications 
that require a password for a user to use any of the software 
applications: generate a plurality of random salt values for the 
software applications: generate a hash for each of the plurality of 
random salt values and input data, each salt value only associated 
with one specific software application, the input data including a 
user identification and a strong password; generate a software 
application dependent password for one hash for a user selected 
software application : and return the software application dependent 
password to a user for the selected software application to gain 
entry to the selected software application . 

Neither Abadi, Peyravian, Schneier, Arnold, and therefore, nor the combination of the 
four, teach, disclose or suggest the limitations contained in Applicant's amended claims 30 and 
43, as listed above. Since neither Abadi, Peyravian, Schneier, Arnold, and therefore, nor the 
combination of the four, teach, disclose or suggest all the limitations of Applicant's amended 
claim 30 and 43, Applicant's amended claims 30 and 43 are not obvious over Abadi in view of 
Peyravian, Schneier and Arnold since a prima facie case of obviousness has not been met under 
MPEP §2142. Additionally, the claims that directly depend from amended claims 30 and 43, 
namely claims 41-42, and 53-54, respectively, would also not be obvious over Abadi in view of 



Peyravian, Schneier and Arnold for the same reason. 
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Accordingly, withdrawal of the 35 U.S.C. § 103(a) rejections for claims 41, 42, 53, and 
54 are respectfully requested. 

IV. Allowable Subject Matter 

Applicant notes with appreciation the Examiner's assertion that claims 24 and 26-28 are 
allowed. 

Applicant respectfully asserts that claims 24, 26-28, 30-31, 33-44 and 46-54, as they now 
stand, are allowable for the reasons given above. 
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CONCLUSION 



In view of the foregoing, it is submitted that claims 24, 26-28, 30-31, 33-44 and 46-54 
patentably define the subject invention over the cited references of record, and are in condition 
for allowance and such action is earnestly solicited at the earUest possible date. If the Examiner 
believes a telephone conference would be useful in moving the case forward, he is encouraged to 
contact the undersigned at (310) 207-3800. 

If necessary, the Commissioner is hereby authorized in this, concurrent and future replies, 
to charge payment or credit any overpayment to Deposit Account No. 02-2666 for any additional 
fees required under 37 C.F.R. §§1.16 or 1.17, particularly, extension of time fees. 



Respectfully submitted, 



BLAKELY, SOKOLOFF, TAYLOR, & ZAFMAN LLP 




Dated: August 30, 2006 



Steven Laut, Reg. No. 47,736 



12400 Wilshire Boulevard 
Seventh Floor 

Los Angeles, California 90025 
(310) 207-3800 
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